Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2020-3716
Magento deserialization vulnerability
CRITICAL
CVE-2020-3718
Magento security bypass vulnerability
CRITICAL
CVE-2020-7995
Dolibarr Improper Restriction of Excessive Authentication Attempts
CRITICAL
CVE-2015-2784
papercrop does not properly handle crop input
HIGH
CVE-2020-0606
Remote code execution in Microsoft.WindowsDesktop.App.Ref
CRITICAL
CVE-2019-10774
php-shellcommand command injection vulnerability
HIGH
CVE-2019-19849
TYPO3 Insecure Deserialization in Query Generator & Query View
HIGH
CVE-2019-5815
Nokogiri implementation of libxslt vulnerable to heap corruption
HIGH
CVE-2019-12408
Missing Initialization of Resource in Apache Arrow
HIGH
CVE-2019-12410
Missing Initialization of Resource in Apache Arrow
CRITICAL
CVE-2019-8158
Magento 2 Community Edition XML Injection
CRITICAL
CVE-2019-8144
Magento 2 Community Edition RCE Vulnerability
CRITICAL
CVE-2019-8136
Magento 2 Community Edition Insecure Component
CRITICAL
CVE-2015-0270
Zend Framework Allows SQL Injection
CRITICAL
CVE-2019-15929
Craft CMS possibility of brute force attempts
HIGH
CVE-2019-18197
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability
CRITICAL
CVE-2018-7269
Yii SQL injection vulnerability
CRITICAL
CVE-2019-16699
sr_freecap for Typo3 RCE Vulnerability
CRITICAL
CVE-2019-16700
slub_events for Typo3 Arbitrary File Upload
HIGH
CVE-2019-16760
Cargo prior to Rust 1.26.0 may download the wrong dependency
MEDIUM
CVE-2019-16751
Devise Token Auth vulnerable to Cross-site Scripting
CRITICAL
CVE-2019-15521
Spoon Library as used in Fork CMS allows PHP object injection
HIGH
CVE-2019-7876
Magento 2 Community Edition RCE Vulnerability
HIGH
CVE-2019-7865
Magento 2 Community Edition CSRF Vulnerability
HIGH
CVE-2019-7615
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
CRITICAL
CVE-2019-11202
Rancher Recreates Default User With Known Password Despite Deletion
CRITICAL
CVE-2019-14271
Moby Docker cp broken with debian containers
CRITICAL
CVE-2019-12468
Wikimedia MediaWiki Incorrect Access Control vulnerability
CRITICAL
CVE-2019-11512
Contao SQL injection in the file manager
CRITICAL
CVE-2015-3907
CodeIgniter Rest Server XXE Vulnerability
HIGH
CVE-2019-13118
libxslt Type Confusion vulnerability that affects Nokogiri
CRITICAL
CVE-2019-12149
silverstripe restfulserver and registry modules SQL injection vulnerability
CRITICAL
CVE-2019-11768
phpMyAdmin SQL injection in Designer feature
CRITICAL
CVE-2017-11365
Symfony Incorrect Access Control
CRITICAL
CVE-2019-12277
Blogifier does not properly restrict APIs
HIGH
CVE-2019-0982
Denial of service in ASP.NET Core
HIGH
CVE-2019-0981
Denial of service in ASP.NET Core
HIGH
CVE-2019-0980
Denial of service in ASP.NET Core
CRITICAL
CVE-2019-11830
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
CRITICAL
CVE-2019-11576
Gitea Allows 1FA Even for 2FA-Enrolled Accounts
CRITICAL
CVE-2019-9901
EnvoyProxy Envoy Missing HTTP URL path normalization
CRITICAL
CVE-2017-16558
Contao SQL injection in the backend and listing module
CRITICAL
CVE-2018-20434
LibreNMS arbitrary OS commands execution
HIGH
CVE-2019-11401
SiteServer CMS RCE via unsafe file upload
CRITICAL
CVE-2022-1811
Publify vulnerable to cross site scripting
HIGH
CVE-2022-29181
Nokogiri Improperly Handles Unexpected Data Type
CRITICAL
CVE-2022-22978
Authorization bypass in Spring Security
HIGH
CVE-2019-25061
Insecure PRNG use in random_password_generator
CRITICAL
CVE-2022-30600
Incorrect Calculation in moodle
CRITICAL
CVE-2022-30599
SQL injection in moodle